debcrafters-packages team mailing list archive

[Launchpad Bug Tracker <2124948@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package ghostscript - 10.05.0dfsg1-0ubuntu4

---------------
ghostscript (10.05.0dfsg1-0ubuntu4) questing; urgency=medium

  * SECURITY UPDATE: null pointer deref on file write failure
    - debian/patches/CVE-2025-7462.patch: catch a null file pointer closing
      pdfwrite in devices/vector/gdevpdf.c.
    - CVE-2025-7462
  * SECURITY UPDATE: stack overflow in pdf_write_cmap
    - debian/patches/CVE-2025-59798.patch: use dynamically allocated buffer
      and check return codes in devices/vector/gdevpdtw.c.
    - CVE-2025-59798
  * SECURITY UPDATE: stack overflow in pdfmark_coerce_dest
    - debian/patches/CVE-2025-59799.patch: bounds check some strings in
      devices/vector/gdevpdfm.c.
    - CVE-2025-59799
  * SECURITY UPDATE: heap overflow in ocr_begin_page
    - debian/patches/CVE-2025-59800.patch: fix int overflow in
      devices/gdevpdfocr.c.
    - CVE-2025-59800

 -- Marc Deslauriers <marc.deslauriers@xxxxxxxxxx>  Thu, 25 Sep 2025
12:14:26 -0400

** Changed in: ghostscript (Ubuntu)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.org/CVERecord?id=CVE-2025-59798

** CVE added: https://cve.org/CVERecord?id=CVE-2025-59799

** CVE added: https://cve.org/CVERecord?id=CVE-2025-59800

** CVE added: https://cve.org/CVERecord?id=CVE-2025-7462

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to ghostscript in Ubuntu.
https://bugs.launchpad.net/bugs/2124948

Title:
  ghostscript ftbfs in questing archive rebuild

Status in ghostscript package in Ubuntu:
  Fix Released

Bug description:
  The package fails to build in the recent archive rebuild
  https://people.canonical.com/~ginggs/ftbfs-report/test-rebuild-20250910-questing-questing.html

  In file included from ./base/echogs.c:18:
  ./base/stdpre.h:348:13: error: ‘bool’ cannot be defined via ‘typedef’
    348 | typedef int bool;
        |             ^~~~
  ./base/stdpre.h:348:13: note: ‘bool’ is a keyword with ‘-std=c23’ onwards
  ./base/stdpre.h:348:1: warning: useless type name in empty declaration
    348 | typedef int bool;
        | ^~~~~~~
  make[4]: *** [base/unix-aux.mak:60: soobj/aux/echogs] Error 1
  make[4]: Leaving directory '/<<PKGBUILDDIR>>'
  make[3]: *** [base/unix-dll.mak:320: so-only-subtarget] Error 2
  make[3]: Leaving directory '/<<PKGBUILDDIR>>'
  make[2]: *** [base/unix-dll.mak:281: so] Error 2
  make[2]: Leaving directory '/<<PKGBUILDDIR>>'
  dh_auto_build: error: make -j1 so returned exit code 2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/2124948/+subscriptions